CVE-2025-60156: Webandprint Ar For WordPress

Critical severity, CVSS 9.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through <= 8.34.

Affected products

• Webandprint Ar For WordPress: up to and including 8.34

Published 2025-09-26. Last modified 2026-06-17.